$ rpki-client -vvf rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.mft File: h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.mft (raw, json) Hash identifier: zAEL5G/nYtIFRTxeiv28VmX4fMqNV85zMi7DIdg5uq0= Subject key identifier: 71:D5:C7:DE:0B:24:4E:87:CD:13:52:8B:A0:C3:BE:5F:E6:19:04:C3 Authority key identifier: 87:B5:D8:53:F6:42:52:15:AD:A7:82:2F:02:A5:74:83:EE:26:7C:04 Certificate issuer: /CN=A912A294/serialNumber=87B5D853F6425215ADA7822F02A57483EE267C04 Certificate serial: 01AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.mft Manifest number: 0199 Signing time: Tue 09 Sep 2025 03:46:16 +0000 Manifest this update: Tue 09 Sep 2025 03:46:15 +0000 Manifest next update: Tue 16 Sep 2025 03:46:15 +0000 Files and hashes: 1: h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.crl (hash: dGhk9y7gmHGMqvNN2uuA+Kuq7ZGU7FxpGmAOdjXe1gQ=) 2: 60C72042052911F0A2361C50C4F9AE02.roa (hash: eoqR2rI7tCJcx2sHbbxw1cinGXO6kmie9biadQvkvGU=) 3: 64B5B49A052C11F0AFEC0478C4F9AE02.roa (hash: osIylBmoiOl0hS+6q4jLTN9ELMVNH7Z3hIxqCI6TGCM=) 4: 24661146FA7311EFB58C366CC4F9AE02.roa (hash: vJ/paOcsiCM0y/LcDeCNMcXQ0i9PBxkDy6/mQy96vcg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.crl rsync://rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 03:46:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 430 (0x1ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A294, serialNumber=87B5D853F6425215ADA7822F02A57483EE267C04 Validity Not Before: Sep 9 03:46:15 2025 GMT Not After : Sep 16 03:46:15 2025 GMT Subject: CN=68bfa307-d6c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:84:ad:c4:f8:56:a5:d5:c4:f2:32:4c:b5:ce: 1b:2e:da:51:53:0e:aa:19:cc:83:64:66:d9:cf:03: d3:65:20:67:7b:bb:13:10:6d:56:75:7e:69:22:25: 33:f4:3f:3f:aa:f8:21:98:fd:04:8b:63:00:2f:76: 52:8e:27:33:28:3c:01:00:32:01:39:b4:ed:eb:c2: a1:43:58:a4:24:40:1d:45:75:5f:6b:14:4d:e2:4b: 3b:ca:f6:3b:87:9d:44:3d:09:b3:aa:18:5c:ec:09: a7:25:53:ad:22:73:d5:ae:02:5a:30:f6:a5:16:be: e6:f2:5c:1b:09:8c:2d:44:19:3e:17:4b:5a:a5:e2: b3:36:27:8d:f3:26:2c:40:21:f3:78:c9:48:b3:fb: 46:3c:18:20:7e:25:c9:6d:41:f0:16:48:aa:ab:42: 62:d8:1a:0a:8b:6c:6e:39:0b:6d:a5:8b:3f:99:6c: f5:97:9b:50:90:55:a1:76:24:ee:b5:19:1a:fe:92: 64:04:5f:50:00:f7:58:61:10:7c:0f:b5:68:da:76: c2:94:ca:b8:54:c7:6f:ae:83:76:50:14:c5:7b:69: 13:3d:a1:48:31:0b:c6:15:51:8b:f4:83:7a:88:7b: 3f:b8:eb:40:25:c1:b1:46:00:ec:24:32:e4:5c:fc: e5:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:D5:C7:DE:0B:24:4E:87:CD:13:52:8B:A0:C3:BE:5F:E6:19:04:C3 X509v3 Authority Key Identifier: keyid:87:B5:D8:53:F6:42:52:15:AD:A7:82:2F:02:A5:74:83:EE:26:7C:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:3e:4d:f8:14:9f:90:33:24:42:43:96:41:eb:22:81:a2:87: 75:1b:7a:77:66:dc:95:e9:5a:ed:1d:58:40:f6:ee:fb:45:2e: a3:e8:48:66:ed:92:21:f7:6b:b9:8b:f9:49:40:4f:46:f4:ad: a3:c9:c4:63:65:ca:63:b3:ea:71:73:49:d7:a6:a2:ea:be:e0: d1:1e:6d:b8:b7:07:1a:af:bb:84:cf:60:83:3e:54:f8:c9:b1: 9c:46:7a:35:cc:08:6f:54:29:dd:2b:d4:b3:f8:bb:0d:89:e1: 8b:cc:01:c6:dd:a8:59:d1:af:7a:f1:0f:35:4b:d2:97:0b:1b: df:aa:2d:e0:ad:52:1b:c6:26:74:72:3b:fe:2f:ef:0f:10:16: 5e:f8:15:5d:59:aa:4c:20:f9:a6:52:0f:07:3a:2c:2e:e3:2f: f2:78:4f:5d:68:25:1d:bf:a6:ec:25:b7:30:da:14:f8:89:ae: 4d:cd:b6:8c:28:c3:72:3a:7c:4f:bc:02:80:de:64:1e:a9:a7: 13:a2:34:86:3e:aa:43:0a:b0:83:3a:80:0b:c9:8f:bc:87:78: 06:8d:33:c3:3c:37:c9:ea:63:95:f1:fa:0c:58:d0:9e:92:87: 1d:d8:ba:3b:05:0a:23:c0:59:57:c8:0c:2d:ef:0e:cc:d8:d4: 60:d1:4e:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAa4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkEyOTQxMTAvBgNVBAUTKDg3QjVEODUzRjY0MjUyMTVBREE3ODIyRjAyQTU3NDgz RUUyNjdDMDQwHhcNMjUwOTA5MDM0NjE1WhcNMjUwOTE2MDM0NjE1WjAYMRYwFAYD VQQDEw02OGJmYTMwNy1kNmMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArIStxPhWpdXE8jJMtc4bLtpRUw6qGcyDZGbZzwPTZSBne7sTEG1WdX5pIiUz 9D8/qvghmP0Ei2MAL3ZSjiczKDwBADIBObTt68KhQ1ikJEAdRXVfaxRN4ks7yvY7 h51EPQmzqhhc7AmnJVOtInPVrgJaMPalFr7m8lwbCYwtRBk+F0tapeKzNieN8yYs QCHzeMlIs/tGPBggfiXJbUHwFkiqq0Ji2BoKi2xuOQttpYs/mWz1l5tQkFWhdiTu tRka/pJkBF9QAPdYYRB8D7Vo2nbClMq4VMdvroN2UBTFe2kTPaFIMQvGFVGL9IN6 iHs/uOtAJcGxRgDsJDLkXPzltwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHHVx94L JE6HzRNSi6DDvl/mGQTDMB8GA1UdIwQYMBaAFIe12FP2QlIVraeCLwKldIPuJnwE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTI5NC85OTJGMUQwRTRB RDYxMUVFOTdCNTNGNzJDNEY5QUUwMi9oN1hZVV9aQ1VoV3RwNEl2QXFWMGctNG1m QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g3WFlVX1pDVWhXdHA0SXZBcVYwZy00bWZBUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTI5NC85OTJGMUQwRTRBRDYxMUVFOTdCNTNGNzJDNEY5QUUwMi9oN1hZVV9aQ1Vo V3RwNEl2QXFWMGctNG1mQVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHPk34FJ+QMyRCQ5ZB6yKBood1G3p3ZtyV6VrtHVhA9u77RS6j6Ehm 7ZIh92u5i/lJQE9G9K2jycRjZcpjs+pxc0nXpqLqvuDRHm24twcar7uEz2CDPlT4 ybGcRno1zAhvVCndK9Sz+LsNieGLzAHG3ahZ0a968Q81S9KXCxvfqi3grVIbxiZ0 cjv+L+8PEBZe+BVdWapMIPmmUg8HOiwu4y/yeE9daCUdv6bsJbcw2hT4ia5NzbaM KMNyOnxPvAKA3mQeqacTojSGPqpDCrCDOoALyY+8h3gGjTPDPDfJ6mOV8foMWNCe kocd2Lo7BQojwFlXyAwt7w7M2NRg0U5H -----END CERTIFICATE-----Generated at Tue Sep 9 23:47:21 2025 by rpki-client